Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414331)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414331 advisory. In rndisqueryoid in drivers/net/wireless/rndiswlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition. Tenable has extracted the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414339)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414339 advisory. An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211P2PATTRCHANNELLIST in drivers/net/wireless/microchip/wilc1000/cfg80211.c in...

UTT 1250GW 安全漏洞

The UTT 1250GW is a wireless router from China Aitai UTT. A security vulnerability exists in UTT 1250GW v2v3.2.2-200710 and earlier versions, which stems from incorrect manipulation of the parameter pvid in the file /goform/aspChangeChannel, which could result in a buffer overflow...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-382934)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-382934 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: ar5523: enable proper endpoint verification Syzkaller reports 1 hitting a warning about an...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414677)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414677 advisory. An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second or subsequent broadcast fragments even...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986908)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986908 advisory. In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix NULL pointer dereference in mt7915getphymode Fix the following NULL pointer...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414676)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414676 advisory. An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414576)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414576 advisory. A NULL pointer dereference flaw was found in the Linux kernels IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection. This fl...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-018712)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-018712 advisory. u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986755)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986755 advisory. In the Linux kernel, the following vulnerability has been resolved: cfg80211: call cfg80211stopap when switch from P2PGO type If the userspace tools switch from...

Belkin F9K1015 安全漏洞

Belkin F9K1015 is a WiFi signal extender from Belkin Canada. A security vulnerability exists in the Belkin F9K1015 version 1.00.10, which stems from incorrect manipulation of the parameter L2TPUserName in the file /goform/formL2TPSetup, which could result in a buffer overflow...

AZL-77435 CVE-2023-53561 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix NULL pointer dereference when removing device In suspend and resume cycle, the removal and rescan of device ends up in NULL pointer dereference. During driver initialization, if the ipcimemwwanchannelinit fai...

UBUNTU-CVE-2023-53574

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: delete timer and free skb queue when unloading Fix possible crash and memory leak on driver unload by deleting TX purge timer and freeing C2H queue in 'rtwcoredeinit', shrink critical section in the latter by freeing...

UBUNTU-CVE-2023-53589

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't trust firmware nchannels If the firmware sends us a corrupted MCC response with nchannels much larger than the command response can be, we might copy far too much uninitialized memory and even crash if t...

UBUNTU-CVE-2023-53602

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix memory leak in WMI firmware stats Memory allocated for firmware pdev, vdev and beacon statistics are not released during rmmod. Fix it by calling ath11kfwstatsfree function before hardware unregister. While at i...

UBUNTU-CVE-2023-53582

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds Fix a stack-out-of-bounds read in brcmfmac that occurs when 'buf' that is not null-terminated is passed as an argument of strreplace in...

CVE-2023-53575

In CVE-2023-53575, the Linux kernel wifi driver (iwlwifi, mvm) fixes a potential array out-of-bounds access by accounting for IWL_SEC_WEP_KEY_OFFSET when verifying key_len in iwl_mvm_sec_key_add(). The fix is implemented in the kernel code referenced in the stable commits: https://git.kernel.org/...

CVE-2023-53575 wifi: iwlwifi: mvm: fix potential array out of bounds access

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix potential array out of bounds access Account for IWLSECWEPKEYOFFSET when needed while verifying keylen size in iwlmvmseckeyadd...

CVE-2023-53574

CVE-2023-53574 affects the Linux kernel wifi/rtw88 driver. The issue arises when unloading the driver, where the TX purge timer is not properly deleted and the C2H queue is not freed, risking a crash and a memory leak. The documented root cause is improper cleanup in the rtw_core_deinit() path, w...

CVE-2023-53561 net: wwan: iosm: fix NULL pointer dereference when removing device

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix NULL pointer dereference when removing device In suspend and resume cycle, the removal and rescan of device ends up in NULL pointer dereference. During driver initialization, if the ipcimemwwanchannelinit fai...